With the Personal Information Protection Act 2016 becoming fully effective on January 1, 2025, transparency has transitioned from a best practice to a legal requirement for organisations using personal information in Bermuda.
At the heart of this transparency are privacy notices. Under section nine of Pipa, a “Privacy Notice” is a clear and easily accessible statement about an organisation’s practices and policies with respect to personal information. It should be provided before or at the time personal information is collected, and include the mandatory disclosures set out in section nine in order to ensure full compliance.
Simply put, it is a document designed to inform individuals about how their personal information is being used.
